Daily zone census

212,452 domains were born on Tuesday, October 6, 2026

212,452
domains appeared
114,025
domains left the zone
12.7%
had a live website by day's end
855
flagged high or critical

On Tuesday, October 6, 2026 the census compared 1,062 zone files holding 77,506,361 domains against the day before. 212,452 names were new (0.274% of the universe), 114,025 were gone, net +98,427. Every new name was probed once over HTTP, honouring robots.txt, to see what was behind it. See the newest day.

New domains per day

Sep 4Oct 19

Each bar is a day; click one to open it. The census covers the gTLD zones ICANN's zone-data service publishes plus a sample of .com and .net.

What was behind the new names

  • Active website26,908 12.7%
  • Parked or for sale1,970 0.9%
  • Registered, no site yet30,977 14.6%
  • Nothing there at all42,720 20.1%
  • Couldn't tell109,877 51.7%

What the 26,908 live sites are about

Unclassified9,288 · 34.5%
Hosting & domains2,633 · 9.8%
E-commerce & retail1,689 · 6.3%
SaaS & tech1,658 · 6.2%
Gambling & casino1,253 · 4.7%
Streaming Piracy861 · 3.2%
AI software852 · 3.2%
Gaming716 · 2.7%
Blogs & personal694 · 2.6%
Construction Trades653 · 2.4%
Crypto Web3638 · 2.4%
Corporate services593 · 2.2%

Where the new names landed

TLDBornGoneFlagged /1k
.xyz75,9035,7310.7
.app14,0945,1122.3
.top12,28710,0792.2
.online10,7416,3773.2
.org10,1777,1342.0
.shop8,81214,1231.0
.info7,7136,0282.3
.site5,2993,4294.5
.store4,5534,2933.5
.vip4,4421,6130.9
.cyou3,6261,4934.1
.click3,2468326.2
.dev3,2148550.6
.pro2,8731,0841.4
.cfd2,6921,1808.9
.world1,9123672.1
.live1,7816704.5
.lol1,7722,4384.5
.icu1,7261,4005.8
.asia1,7047102.9
.digital1,5953560.6
.tech1,4995396.0
.space1,4838570.7
.fun1,41897812.7
.autos1,39515,1110.7

Top 25 of 525 TLDs with a birth or death that day. Full table: /api/zone/census/tlds?day=2026-10-06.

Who is parking them

Dan753
Sav159
Atom132
Afternic46
Domeneshop44
Sedo36
NameBright31
Epik6
Voodoo3
Fabulous1

What the live sites are built with

Vercel3,126
WordPress2,100
Shopify168
Wix108
Next.js102
Squarespace68
GitHub Pages17
Webflow9
Drupal6
Joomla4

Writing system of the live sites

latin22,518
han1,846
cyrillic1,661
arabic352
hangul200
thai131
bengali53
hebrew46

How old the departed names were

1–2 years648
2–5 years13
6–30 days48
1–3 months79
over 5 years3
3–12 months148
0–5 days (add-grace return)13
~1 year (first renewal lapse)48

Risk signals

Every one of the 394,314 births was scored on its name, its nameservers and registrar, and the page it served. 10,413 scored at all; 35 critical, 820 high, 2,046 medium, 7,512 low. The top 300 were screenshotted and shown to a model, which called 130 of them phishing, scam or abuse and 116 benign.

TLDs with the most flagged births per 1,000

.mom34.2 · 9 of 263
.bond32 · 7 of 219
.sbs22.1 · 28 of 1,266
.trade16.4 · 2 of 122
.skin15.2 · 3 of 198
.cam12.9 · 6 of 464
.fun12.7 · 20 of 1,418
.casa11.9 · 3 of 253
.help10.7 · 6 of 563
.design9.7 · 1 of 103

Signals that fired most

brand in page title, not in the name1,269
TLD with a high abuse rate1,162
brand name at a retail registrar778
brand in the name731
form on a brand-styled page713
punycode name489
brand name at a watch-list registrar298
brand name behind Cloudflare287
one-letter brand typo191
lure words (login, verify, secure…)183
identical page on many newborns151
page impersonates a brand130

Brands most often echoed in new names

icloud69
fedex49
gmail44
whatsapp44
binance43
google30
amazon27
openai27
usaa24
ebay23
vanguard22
tiktok20

Registrars of flagged names

GoDaddy.com, LLC241
NameCheap, Inc.234
HOSTINGER operations, UAB191
Porkbun LLC167
Spaceship, Inc.167
Dynadot Inc146
NameSilo, LLC117
Name.com, Inc.83
Cloudflare, Inc.79
GMO Internet Group, Inc. d/b/a Onamae.com65

Worth a second look

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticalrevolutsupport.appscore 80echoes revolut· active website
brand in the name “revolut”lure words (login, verify, secure…) “support”brand name behind Cloudflare “cloudflare.com”form on a brand-styled page “has_form”

Model opinion: looks like phishing (target: Revolut), confidence 90%. An opinion, not a finding.

Criticalvenmor.appscore 74echoes venmo· active website
brand in the name “venmo”brand name behind Cloudflare “cloudflare.com”brand in page title, not in the name “whatsapp”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 90%. An opinion, not a finding.

Criticalmetatask.appscore 72echoes metamask· active website
one-letter brand typo “metatask≈metamask”brand name behind Cloudflare “cloudflare.com”brand in page title, not in the name “robinhood”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Criticalvanguardbharatassetadvisory.shopscore 69echoes vanguard· active website
brand in the name “vanguard”brand name behind Cloudflare “cloudflare.com”brand name and brand-styled page “vanguard”form on a brand-styled page “has_form”

Model opinion: looks like a scam, confidence 85%. An opinion, not a finding.

Criticalazetrade.xyzscore 68· active website
TLD with a high abuse rate “xyz”page impersonates a brand “Binance”brand in page title, not in the name “binance”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 62%. An opinion, not a finding.

Criticalbestgiftdealsai.clickscore 68· active website
TLD with a high abuse rate “click”page impersonates a brand “Amazon Prime”brand in page title, not in the name “amazon”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 72%. An opinion, not a finding.

Criticalcextrace.funscore 68· active website
TLD with a high abuse rate “fun”page impersonates a brand “Binance”brand in page title, not in the name “coinbase”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 74%. An opinion, not a finding.

Criticalsex-education-lordfilm.cfdscore 68· active website
TLD with a high abuse rate “cfd”page impersonates a brand “Netflix”brand in page title, not in the name “netflix”form on a brand-styled page “has_form”

Model opinion: looks like abuse, confidence 90%. An opinion, not a finding.

Criticalsmspanelpro24.shopscore 66· active website
page asks for credentials “Sign in to your account”page impersonates a brand “Binance”login form “has_form+login words”

Model opinion: looks benign, confidence 60%. An opinion, not a finding.

Criticaltesla-ai.websitescore 65echoes tesla· active website
ambiguous brand word “tesla”brand name behind Cloudflare “cloudflare.com”page impersonates a brand “Coinbase”brand name and brand-styled page “tesla”+1 more

Model opinion: looks like a scam (target: Tesla), confidence 90%. An opinion, not a finding.

Criticalkhodyachie-mertvetsy-vyzhivshie-lordfilm.cfdscore 64echoes etsy· active website
brand in the name “etsy”many hyphens “3”very long name “40”TLD with a high abuse rate “cfd”+3 more

Model opinion: looks like abuse, confidence 86%. An opinion, not a finding.

Critical092375coinbase.comscore 63echoes coinbase· active website
brand in the name “coinbase”brand plus digits “092375coinbase”random-looking name “H=3.81”brand name behind Cloudflare “cloudflare.com”+2 more

Model opinion: looks like abuse (target: Coinbase), confidence 80%. An opinion, not a finding.

Criticalaifidelity.storescore 63echoes fidelity· active website
brand in the name “fidelity”brand name and brand-styled page “fidelity”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 90%. An opinion, not a finding.

Criticalstarlink-e-sim.shopscore 63echoes starlink· active website
brand in the name “starlink”brand name and brand-styled page “starlink”form on a brand-styled page “has_form”

Model opinion: looks like phishing (target: Starlink), confidence 90%. An opinion, not a finding.

Criticalvanguardmobility.sitescore 63echoes vanguard· active website
brand in the name “vanguard”brand name and brand-styled page “vanguard”form on a brand-styled page “has_form”

Model opinion: looks like a scam, confidence 60%. An opinion, not a finding.

See all 855 high and critical rows for 2026-10-06

About this data

The census diffs the zone files ICANN's Centralized Zone Data Service publishes for about a thousand gTLDs, plus a sample of .com and .net, against the previous day. A birth is a name present today and absent yesterday; a death is the reverse. Births are probed once over HTTP with an identified user agent, robots.txt honoured, and classified by what came back. Subjects are assigned by a language model reading the page text. The risk scorer is deterministic and additive; its weights and word lists are public in the API's reasons field.

Aggregates and named rows are free as JSON: API docs. Per-domain answers are also on every domain report. Names in .com and .net are counted in every aggregate but not listed by name until the redistribution terms of that zone's access agreement are confirmed.